[waraxe-2004-SA#010 - Multiple vulnerabilities in Error Manager v2.1 for PhpNuke]

================================================================================ waraxe-2004-SA010 ================================================================================ Multiple vulnerabilities in Error Manager v2.1 for PhpNuke...

waraxe-2004-SA010.txt

=============================================================================== = waraxe-2004-SA010 =============================================================================== = Multiple vulnerabilities in Error Manager v2.1 for PhpNuke...

PHP-Nuke Error Manager Module 2.1 - error.php?language Full Path Disclosure

PHP-Nuke Error Manager Module 2.1 - error.php?language Full Path Disclosure source: https://www.securityfocus.com/bid/9911/info It has been reported that Error Manager is prone to multiple vulnerabilities. These issues are due to failure to validate user input, failure to handle exceptional...

waraxe-2004-SA006.txt

================================================================================ waraxe-2004-SA006 ================================================================================ Multiple vulnerabilities in 4nalbum module for PhpNuke...

[waraxe-2004-SA#006 - Multiple vulnerabilities in 4nalbum module for PhpNuke]

================================================================================ waraxe-2004-SA006 ================================================================================ Multiple vulnerabilities in 4nalbum module for PhpNuke...

Invision Power Board (IP.Board) < 1.3 - SQL Injection

IP.Board SQL Injection Vendor: Invision Power Services Product: IP.Board Version: = 1.3 Website: http://www.invisionboard.com/ BID: 9810 Description: Invision Power Board IPB is a professional forum system that has been built from the ground up with speed and security in mind, taking advantage of...

Invision Power Board (IP.Board) 1.3 - SQL Injection

Invision Power Board IP.Board 1.3 - SQL Injection IP.Board SQL Injection Vendor: Invision Power Services Product: IP.Board Version: = 1.3 Website: http://www.invisionboard.com/ BID: 9810 Description: Invision Power Board IPB is a professional forum system that has been built from the ground up wi...

LAN SUITE Web Mail 602Pro Multiple Vulnerabilities

Application: LAN SUITE Web Mail Server: WEB602/1.04 Vendors: Software602, Inc http://www.software602.com Versions: 602Pro Platforms: Windows Bug: Directory Listing, Local Path Disclosure and Cross Site Scripting Risk: Medium Exploitation: Remote with browser Date: 28 Feb 2004 Author: Rafel Ivgi,...

Working Resources BadBlue Server 2.40 - PHPtest.php Full Path Disclosure

Working Resources BadBlue Server 2.40 - PHPtest.php Full Path Disclosure source: https://www.securityfocus.com/bid/9737/info It has been reported that BadBlue Server may be prone to a remote path disclosure vulnerability that may allow an attacker to disclose the installation path by issuing a...

TalentSoft Web+ webplus.exe Path Disclosure

The remote host appears to be running Web+ Application Server. The version of Web+ installed on the remote host reveals the physical path of the application when it receives a script file error. %NASLMINLEVEL 70300 This script was written by David Kyger See the Nessus Scripts License for details...

Working Resources BadBlue Server 2.40 - 'PHPtest.php' Full Path Disclosure

source: https://www.securityfocus.com/bid/9737/info It has been reported that BadBlue Server may be prone to a remote path disclosure vulnerability that may allow an attacker to disclose the installation path by issuing a request for 'phptest.php' script. BadBlue version 2.4 has been reported to ...

CVE-2004-0066

phpGedView before 2.65 allows remote attackers to obtain the absolute path of the web server via malformed parameters to 1 indilist.php, 2 famlist.php, 3 placelist.php, 4 imageview.php, 5 timeline.php, 6 clippings.php, 7 login.php, and 8 gdbi.php...

NetWare-Enterprise-Web-Server/5.1/6.0 Multiple Vulnerabilities

Software: Novell Netware Vendor: http://www.Novell.com Versions: NetWare-Enterprise-Web-Server/5.1/6.0 Platforms: Windows Bug: Multiple Vulnerabilities Risk: Medium Exploitation: Remote with browser Date: 6 Jan 2004 Author: Rafel Ivgi, The-Insider e-mail: [email protected] web:...

novellNetware.txt

Software: Novell Netware Vendor: http://www.Novell.com Versions: NetWare-Enterprise-Web-Server/5.1/6.0 Platforms: Windows Bug: Multiple Vulnerabilities Risk: Medium Exploitation: Remote with browser Date: 6 Jan 2004 Author: Rafel Ivgi, The-Insider e-mail: [email protected] web:...

WebTrends Reporting Center 6.1 Management Interface - Full Path Disclosure

WebTrends Reporting Center 6.1 Management Interface - Full Path Disclosure source: https://www.securityfocus.com/bid/9460/info The WebTrends Reporting Center management interface discloses installation path information when an invalid argument for an interface URI parameter is requested. This...

WebTrends Reporting Center 6.1 Management Interface - Full Path Disclosure

source: https://www.securityfocus.com/bid/9460/info The WebTrends Reporting Center management interface discloses installation path information when an invalid argument for an interface URI parameter is requested. This information may permit an attacker to enumerate the layout of the underlying...

CVE-2004-0066

phpGedView is affected by CVE-2004-0066 up to version 2.64. The vulnerability allows remote attackers to disclose the web server’s absolute path via malformed parameters to multiple PHP pages (indilist.php, famlist.php, placelist.php, imageview.php, timeline.php, clippings.php, login.php, gdbi.ph...

CVE-2003-1526

PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as 1 ", 2 ', or 3 in the search field, which reveals the path in an error message...

QuikStore Shopping Cart Discloses Installation Path & Files to Remote Users

Indonesia Security Development Team Advisory QuikStore Shopping Cart Discloses Installation Path & Files to Remote Users ===================================================================== Advisory Name: QuikStore Shopping Cart Discloses Installation Path & Files to Remote Users Release Date:...

SGDynamo sgdynamo.exe HTNAME Parameter Path Disclosure

The CGI 'sgdynamo.exe' can be tricked into giving the physical path to the remote web root. This information may be useful to an attacker who can use it to launch more effective attacks against the remote server. %NASLMINLEVEL 70300 This script written by Scott Shebby 12/2003 See the Nessus Scrip...